Rogue Scan - Proxim ORiNOCO AP-700 User Giude

Advanced Configuration
Alarms
Syslog Message Name
CLI Configuration File Execution
Errors
SSH Initialization Failure
SSH Key Generation Successful
Wireless Service Shutdown
Wireless Service Resume
MIC Attack Occurred
MIC Attack from Wireless Station 4
SNTP Time Retrieval Failure
SNTP Time Sync-Up Failure

Rogue Scan

The Rogue Scan feature provides an additional security level for wireless LAN deployments. Rogue Scan uses the
selected wireless interface(s) for scanning its coverage area for Access Points and clients.
A centralized Network Manager receives MAC address information from the AP on all wireless clients detected by the AP.
The Network Manager then queries all wired switches to find out the inbound switch/port of these wireless clients. If the
switch/port does not have a valid Access Point connected to it as per a pre-configured database, the Network Manager
proceeds to block that switch/port and prevent the Rogue AP from connecting to the wired network.
Figure 4-25 Preventing Rogue AP Attacks
Priority Severity
4 Minor
3 Major
6 Informational
6 Informational
6 Informational
4 Minor
Minor
4 Minor
4 Minor
Description
There is an error in execution of the CLI
configuration file. The message specifies the
filename, line number, and error reason.
One of the following failures occurs:
Keys not present
Keys cannot be generated
Internal error (no available resources)
SSH Key generation is successful.
Wireless service is shutdown.
Wireless service resumes.
MIC attack occurred; wireless interface is shut
down for 60 seconds
A MIC attack is detected from a wireless station.
SNTP Client in the AP fails to retrieve time
information from the configured SNTP servers.
Also included in message: IP Address of SNTP
server.
SNTP Client in the AP fails to synchronize the time
with the SNTP server it was communicating with.
Also included in message: IP Address of SNTP
server.
AP-700 User Guide
81